dcfffc33d33b1907ac53dd8a92f0995bf5408cba966399564000879d095ee2e6

Analysis

max time kernel
6s
max time network
179s
platform
android_x64
resource
android-33-x64-arm64-20240514-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
submitted
17/05/2024, 18:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
50c30b77bf9f4440aabb2490274d222e_JaffaCakes118.apk
Size 10.7MB
Sample240517-wlx2dabf86
SHA256 dcfffc33d33b1907ac53dd8a92f0995bf5408cba966399564000879d095ee2e6
MD5 50c30b77bf9f4440aabb2490274d222e
SHA1 df27dc502a919952bf0c7e2ae9e1de7ef68a12e0
SHA512 c4495f71703bd2621d0c65bff00b65c70086b0310824029edebe82ba74b77b70a6c6dc4c9c042da6557a7a2e89c9cf59f5b81b49d0d39547d3c8e09889a1c559
SSDEEP 196608:tqmqV5EogW+wz4pcpM+XYqH/UW3r7gpjRe3+AuoQr4RiOj/7NmJJC:0m8EmPzQs7fUoPwjRey+XT7eC
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.cai.wuye/[email protected]	4346	com.cai.wuye

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cai.wuye

com.cai.wuye
1⤵
- Loads dropped Dex/Jar
- Checks if the internet connection is available
PID:4346

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/user/0/com.cai.wuye/.jiagu/classes.dex
Size 2.6MB
SHA256 ee44f75d69e9af5f90d58abb1d617721ea6207dbc080bd72e505a9a516128fb0
MD5 25416cbe0fb512b427664c85fe0008af
SHA1 fc854944d91a76dbac82aea5b0bd59b4d8fcf7ab
SHA512 9bea4cd1890103f53f4e64933bf713420a17eb272f38661d7c2307797b8d129ee67cbfb55fec959b9f9a99546c9627e9784743888c14ac33d60f8e1794029196
SSDEEP 49152:PBpEWpFCwAgSMje3P4Oktls1bXlygQrjGaFXw7:PRFOgSvlSGB
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu.so

Path /data/user/0/com.cai.wuye/.jiagu/libjiagu.so
Size 455KB
SHA256 78e4ea857f10c2df6c7b94f0584524b52ecc099ed29478fe3964037b8a86ed2e
MD5 e5a53000766ebc433b27d6a66ec4f555
SHA1 2c8f53f1c03aec2005bcad67d731f07261dabde0
SHA512 370a1cb93b14556ad861724f4e9995c9a4c6d37cf2d570f888d1c6000c66d27ac63496b0703361e9fc9bc7f309b7aa4407c5f339d186b0a5b72520d23d04b68d
SSDEEP 12288:XfCZt8eDxO+LCDA89hC2KL/MqEvnapbMt6hVPZWJ:Xfw/O0Cc8zCD/MVvUHnRWJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

libjiagu_64.so

Path /data/user/0/com.cai.wuye/.jiagu/libjiagu_64.so
Size 429KB
SHA256 82e708e200cebe270ec57231729413621a8904e907efac8cfe71cb2cf16a3c10
MD5 05a8c3ca16893f4e6cc997a82d987fb3
SHA1 76d6c6d19e0bfa83c847e5d330bd144f58994bff
SHA512 2a878c39e713fb6ff5b457f94a1fe2b5adc456924d087a1b6abd59afc0b0e9bad68852eddd34c6441e8996e66eb5fdb711ed6f477d6e447dd48cfd151d89fe96
SSDEEP 6144:Smiv2XXXcV9s7njUW9CCMq74jcDKpBpzAc0bLhepbW9z4/Kl3VAtW0uxiZ:WvOXXcVmnz9zflDK+d5epb6chtWbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

[email protected]

Path /data/user/0/com.cai.wuye/[email protected]
Size 5.5MB
SHA256 a055f1cf1c813fb85c2f4f007684b0b1c93329afd23c7d130fb78ed767334817
MD5 4e2755568939809839480adc2913b0fd
SHA1 d09f45ae2e847a17fad5bbcb15a9e3bcf27a03a1
SHA512 49303daa2f9c67a7e6fff68bd3a52448dbe47a65e09d0da1a8e390452de53958e83cef6be0ba9f1693a8996ffa4594064c465717ea313135731ca41e7a6b255d
SSDEEP 49152:KlYpmFS69xxZQ8CBmK62XIkwWhLcIsLt0XxWKbAE8aCqgQrjGaFXw7:4eqrVK62reOxXbAUGB
MD5 SHA1 SHA512 SSDEEP

Download

.jg.di

Path /data/user/0/com.cai.wuye/files/.jglogs/.jg.di
Size 348B
SHA256 d9249311dc52073d08a3261195bbfebf2e7c78a10851186f6b80c6d7b553e883
MD5 4f9774c60cd679691790a78d8703de85
SHA1 f4e22b82c14abc0ad3d8d510ce2d8b2d09598774
SHA512 438c1f864eab3c11bb2f96bd217c8c6fdfd20a717962dc523e263dccae2b51078762d3e4a28783264ef9d4cc0492240a3fe6ee7375f2a927a9ee539221a174b6
MD5 SHA1 SHA512

Submit Download

.jg.ri

Path /data/user/0/com.cai.wuye/files/.jglogs/.jg.ri
Size 314B
SHA256 d093e991c5c09389dc6d9346dcca9e6f93f66fd0ce0dacb8dc33946fcb0c00bd
MD5 18517aa7f8bcf312341f6195a9a98852
SHA1 cc99820aa5a0c430e6d35f873405d6da52ddc028
SHA512 014952bf48182bd906ec69dea2df1928de7e61cc2a8e84904bb3fe8c860fad7d9c67a424b1ed3413dc2bb84c749ce1a9248bb9ef71a95589d51242dfbea9e839
MD5 SHA1 SHA512

Submit Download

.jiagu.lock

Path /data/user/0/com.cai.wuye/files/.jiagu.lock
Size 27B
SHA256 ae6ce92872a7985e06d0bc036330accea5a5926fa2286694275a7d53d79397b2
MD5 3ca55ee2ea455075d6d827c057d5bbc5
SHA1 7dec6c76e6426666545434abf0877d5feb291d61
SHA512 38d9ee9a449b037aa38e99f127207c643e64f728677890fd91be77b84de17c5751267c8356d3ebbcc56c9c7ffb16f370313b583e99706ebae545604ca4d1f9f2
MD5 SHA1 SHA512

Submit Download

.deviceId

Path /storage/emulated/0/360/.deviceId
Size 48B
SHA256 36c5c63f39ddf7a6a9c01946e4f78b95790aa734176802e793e95724a1b5b731
MD5 4c4c5285293d5141f582aefa4e038669
SHA1 e01852a72e5a8e6f7d63a21426b515118196047b
SHA512 097aa673273e307f7bfb7c08861ad389d4b5f7fae55d972a5c1636aa66d0b8d23b5eb9b696cefe0e5b942f23969dabf0147397aeca85fb9a4d75e0473104e399
MD5 SHA1 SHA512

Submit Download

.iddata

Path /storage/emulated/0/360/.iddata
Size 32B
SHA256 b3726eec4b6ab1570890b3b2ad74559ca49fb9b9afd8d9931a8082a3dd03636e
MD5 aca0b304aff14554d3377857f839bc45
SHA1 900c0b6a9aaea5c9cb3b86bc4510ae02fac37c75
SHA512 17d651ed329fc30c4805485a0520a6fcf6e0bb8360602ef84a7c2de8498f771135db259a8fdacaf41344a628146bb57816e519a634155e16d445b93985a185c0
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads